Tuesday, February 13, 2007

Google Flags Pages that Install Malicious Software

I mentioned in August last year that Google started to show malware warnings if you click on a search result from a harmful site. Now Google shows a message below the title of a search result: "This site may harm your computer." Even if you click on the title, you won't be able to visit the site: Google explains you once again that the site could be dangerous and recommends you to visit another search results or to change your query. The only way to visit the site is to copy the URL and paste it in the address bar, which is not an obvious or a trivial task for an ordinary computer user.

Google explains: "this warning message appears with search results that we've identified as sites that may install malicious software on your computer. We want our users to feel safer when they search the web, and we're continuously working to identify such dangerous sites and increase protection for our users."

Unlike spam pages that try to deceive search engines and are penalized or removed from the index, these pages deserve their ranking, but users are strongly discouraged to visit them.

A study from McAfee SiteAdvisor conducted in December 2006 revealed that: "41.4% of [dangerous] sites exhibit poor e-mail practices, 24.5% contain risky downloads, 26.8% are scam sites, 32.3% link to other risky sites and 3.0% contain browser exploits." Also, 4.2% of Google's search results are dangerous sites.

Labels: ,

  12 comments ( Post a comment )
That's a great idea, however I would suggest that Google change the text color to something different than the main link (red for example), in order to increase the visibility of this feature.
it seems there are some bigger changes in listings Note second result there is + map
Interesting link for + Map above here is cache of the page: cache and nowhere on the page is text "3501 W Vine St, Kissimmee, AL 34741" like on the snipped except on the footer image footerpic.gif

Does Google do OCR?
That's Google PlusBox. Matt Cutts explains it:

"If someone searches for your business and we have good confidence that we know your business address, we'll include an expandable Plus Box in your search result listing."

You can add the address of a business at Local Business Centre.
I have a website that sells flowers and noticed a week ago that there was a warning notice on it. To my knowledge there is nothing "dangerous" on the site and I am very willing to fix it if there is ..however I was not notified by google or Stopbadware that the notice was going to be put on. I have appealed twice to Stopbadware and 5 days later have had no response. Meanwhile I am losing business..no-one is going to visit a site that has a warning notice on it. What do I do? And who is liable for any loss of earnings resulting from this warning notice..Google or Stopbadware?
Send an email to appeals@stopbadware.org explaining why you think your site was mistakenly identified or how you have modified your site. They will investigate and contact you with their findings. If they determine that your site does not spread malicious software, they will inform Google, who will remove the identification from the search results.
thanks for the advice..I've appealed twice to stopbadware and had no response..or acknowledgement. Do you have any idea how long it takes? Mothers' day is coming soon and I stand to lose a lot of business.
I've heard it takes around 10-14 days. In the meantime, you should check your site and make sure you don't have scripts that try to install applications, exploits or something like that.

StopBadware also has a forum, where their members answer questions.
Three week ago there was a warning notince on my website http://www.etatvasoft.com I visit stopbadware.org and read the guide line for removing badwares and malicious software, I do scan my server with stopbadware.org recommend software, then notified to Stopbadware after 1 week Warning message is gone. Thanks to Stopbadware.Org.

Jim
http://www.tatvasoft.com
So nice!!!
Could you please provide us proxied access to the unsafe Internet?
Thanks
there's a virus that adds some javascript code that loads up other sites from your files. If your server / web files are infected google might flag your site!

search your files for "function nbsp" if you find some wierd code, that's been added by a virus.

i'm trying to get this virus off my server / pc. The main virus scanning apps aren't very good at detecting this and your host will usually says it you fault not theirs.
they say that it's better to have out of jail 100 guilty people than to imprison one innocent.

our site, www.gma-nitsa.gr, has been flagged as a badware source. we have check and recheck it. we have also open a discussion in stopbadware.org group - http://groups.google.com/group/stopbadware/browse_thread/thread/097ace758f5607f3/13151903ffac1274#13151903ffac1274 . none can find any problems with our site.

but, after 2 requests for rescan, google insists that we are a badware source.

gma-nitsa.gr is a site dedicated to food recipes and techniques and is named after my grand mothers name, Nitsa. i have it online since 2001 and it is highly reputable with very warm friends.

in the immage http://www.gma-nitsa.gr/images/google-stopbadware/visits.png
you can see the decrease in traffic since google marked our site as a badware source.

if *anyone* can provide me with a contact information, someone in google who can explain the problem it will be a great help.

Thank you in advance for your help.

gEorgE sTaThis